Token owner contracts, census and native RTK parity proposals

[seathatflowsinourveins]

Scope

Records the counts-only Codex before census, the A2 task-trigger/skill proposal
and upstream RTK Codex-decision logger/Claude-matcher parity proposals. The
native-arm owner study, operational routing and actual organic AFTER remain
separate. Drafts#779/#775 carry the concrete P0 repairs/countability changes.

• Base1796303f; A2 proposal-diff baseecfa112764c664d35377dd66b8cfcb67e5a94d60.
• Lane: lane:foundation; existing draft, no landing by this lane.
• Owned six files: three dated token decisions and three routing/proposal files.
• Actual shared templates remain withF9/A2. No host/trust/permission edit,
  local RTK fork, install or registry change in this documentation PR.

SOTA sources

• Codex0.160.0: historical native-item census/persistence and supported public SDK primitives.
• Current Codex0.160.1: native PreToolUse IDs match RTK extractor; hook persistence/notification/metric contracts.
• RTK0.51.0: existing SQLite logger omitted by run_codex; nonunique decision records; shared multi-host permission matcher;5s tracker busytimeout.
• Claude native permissions: current official exact-command/precedence contract, checked against installed2.1.291; not a closed-binary source dump/test.
• Maintained collector: supported --lanes and private count/state ledger.
• context-mode, Headroom0.37.0, ai-memory2.5.2: pinned task contracts and supported unchanged skill installer.
• A2 source/count table pins the navigation alternatives and retains their
  independent owner/readiness gates.

Evidence-class table

Claim	Class	Evidence / limit
Before census	local_integration	Maintained collector/independent recount;6776MCP=root3470+desc3306,6591completed/185failed;8062commands/6947RTKprefixes
Hooks/confirmed rewrites unknown	source_review + countability gap	Prefixes/empty SQLite comparison cannot establish firings or actual rewrites
Current trust discovery	local_integration	Maintained check0; no trust/config edit; app-server can create normal state files
Upstream Codex logger reuse feasible	source_review	Native payload IDs match extractor; native scratchDB/latency/regression/release gates remain
Claude unset launcher rejected by RTK	native_proven	Native dry-run twoDenied/oneNo-rewrite diagnostics, each exit1/stdout0
A2 diff format/base	local_integration	Historical isolated-index check0 and retained exactbase/diff; shared template untouched
Final current validator	local_integration	Post-restart scripts/validate.py0:69components,10184hashedfiles,4profiles,204receipts; no live provider/GPU execution
Organic AFTER/native READY/exclusions/savings	pending	Actual revision/application, coverage and new matched observation required

Local commands run

Historical head86869fb: native collector0, scripts/validate.py0; isolated-index
gitapply--unidiff-zero--cached--check0, staged whitespace0. New proposal/decision
staged whitespace0; resumed validator0 with69components/10184hashedfiles/
4profiles/204receipts. Post-restart version reads stillCodex0.160.1,
RTK0.51.0,Claude2.1.291. No native model run or
upstream Cargo suite is claimed by source review.

Decision records

• 2026-10-05-native-token-context-owner-contracts.md: original U1 owner/exclusion gates.
• 2026-10-06-codex-token-census-routing-proposals.md: A2 sources/counts/ownership and overlapped navigation-readiness proposal, sequenced after#709/User-facing times in local time with UTC beside; new WSL distributions follow the Windows time zone #758.
• 2026-10-06-native-rtk-evidence-and-permission-parity.md: P2 logger/native-capture alternatives and P3 Claude-origin matcher parity; no global other-host change without parity evidence.

RTK logger rows are classified decisions, not allfirings or confirmedexecution;
dedup/conflicting outcomes and native terminal joins remain explicit. Five-second
SQLite contention plus native awaited hook completion requires a speed/timeout
adoption gate. SDK worker remains owned by#773 and does not capture currentCLI
lanes merely by using a public turnstream. Every AFTER row needs exact launcher,
observerepoch, gaps, reloadboundary and actual appliedrevision.

Checklist

• No raw rollout/command/result/conversation, credential value or active config
  committed. No shared-template, host status/receipt, billing or policy change.
• Counter scopes, failed/unknown states and unchanged original before are retained.
• Co-op GPT read/CCACK and actual live native read-back remain external gates.
• Resolve actual connector review threads before queue request;5f owns queuedPRs.

[seathatflowsinourveins]

Closed with a record by the PR triage of 2026-10-07 (the command center's ruling). Not merged; the branch codex/ns2604-overlap-token-20261005 stays on origin at 425a378.

Folded into #799 at 36f3cab. Of this PR's 6 changed files, 6 are byte-identical there and 0 are merged; none is lost. Registry: 0 entries added or changed by this PR are all present there, 0 of them re-registered to the merged file's hash.

Reopen trigger: none while #799 carries the content. Reopen with gh pr reopen 749.